HTTP::Body versions before 1.23_01 for Perl contain a vulnerability where the multipart parser does not limit the size or number of lines in a multipart part header block. This allows a remote attacker to exhaust server memory by sending a single crafted request with an unbounded multipart header.